METHOD OF REMOVING PERSONAL INFORMATION 
FROM AN ELECTRONIC DOCUMENT 



FIELD OF THE INVENTION 

The present invention is directed to methods of 
removing a user's personal information from an electronic 
document. 

BACKGROUND OF THE INVENTION 

The privacy and/or security of a user of an electronic 
document has become an important issue during the 
information age. The creation and manipulation of a single 
document for business or personal use gives rise to concern 
about the accessibility of personal information about a user 
associated with the document. In today's business world, a 
single document may be intentionally or unintentionally 
accessible to numerous persons including fellow co-workers, 
competitors, and computer hackers. Consequently, users of a 
document have become very concerned about protecting their 
personal information associated with a document. 

Many computer software applications require personal 
information from a user to install and/or run the application. 
For example, when a user installs an application on a 
computer, the application may ask the user to provide a user 
name or some other piece of personal information such as a 
company name or project name for installation purposes. In 



addition, the user may input other pieces of personal 
information into data fields of a document without prompting 
from the application. The user's name, or other piece of 
personal information, may be stored and later used by one or 
more operating features within the given application. Further, 
the user name or other piece of personal information may be 
automatically added to a document, created by the given 
application when one or more operating features within the 
given application are used. 

One example of the use of personal information in a 
software application may be found in Microsoft Corporation's 
OFFICE 2000 application. In a document created by the 
OFFICE 2000 application, there are many places where 
personal information, such as the document author's name, is 
stored. The number of times and the places in which the 
author's name shows up in a document depends on the 
features used. For instance, in the Microsoft Corporation's 
WORD application, when you add a comment to a document, 
by default, an OFFICE 2000 application adds the name of the 
document author in the comment. Once the document has 
been saved with the comment, there is currently no way to 
remove the author's name from the comment other than by 
deleting the comment. Similarly, when you save the 
document, the WORD application automatically adds the 
name of the document author to the properties of the file. In 
order to remove the author's name, a user has to remember to 
go to the File Properties dialog, delete the author name from 
the File Properties dialog, and then resave the document. 

What is needed in the art is a method of easily 
removing an author's or user's personal information 
associated with a document created by a software application. 

SUMMARY OF THE INVENTION 

The present invention addresses some of the difficulties 
and problems discussed above by the discovery of a method 



of removing a user's personal information from a document 
via activation of a "privacy option." The privacy option, 
when activated, removes personal information from a 
document and, in some case, replaces the user information 
5 with generic information. The privacy option may be used to 

remove personal information from a document once the 
document is saved by the application. Alternatively, if an 
application does not support a "save" function for a particular 
document type, personal information may be removed once 

10 the privacy option is activated for a given document. The 

privacy option may be used to make inaccessible any personal 
information associated with a document. 

Accordingly, the present invention is directed to a 
method for removing personal information from a document, 

15 which has been produced by a given application, wherein the 

method comprises the step of selecting a privacy option 
provided by the application, wherein the privacy option 
removes one or more pieces of personal information from the 
document or replaces one or more pieces of personal 

20 information within the document with generic information. 

The present invention is also directed to a computing 
system containing one or more application modules, wherein 
at least one application module contains a document- 
generating application and a privacy option for removing one 

25 or more pieces of personal information from a document 

created by the application. 

The present invention is further directed to a computer 
readable medium having stored thereon computer- executable 
instructions for performing the steps of removing or replacing 

30 one or more pieces of personal information associated with a 

document via a privacy option. 

These and other features and advantages of the present 
invention will become apparent after a review of the 
following detailed description of the disclosed embodiments 

35 and the appended claims. 
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5 BRIEF DESCRIPTION OF THE FIGURES 

FIG. 1 is a flow diagram of some of the primary 
components of an exemplary operating environment for 
implementation of the present invention. 

FIG. 2a is a diagram illustrating an exemplary method 
10 for removing or replacing one or more pieces of personal 

information from an electronic document, 

FIG. 2b is a continuation of the flow diagram depicted 
in FIG. 2a. 

FIG. 3 illustrates an example of personal information in 
15 a file properties dialog of an OFFICE 2000 document. 

FIG. 4 illustrates the file property dialog of FIG. 3 
following removal of the personal information once stored in 
the file. 

FIG. 5 illustrates an example of personal information in 
20 a comment block of a document created by Microsoft 

Corporation's WORD application. 

FIG. 6 illustrates the comment block of FIG. 5 
following removal of the personal information once stored in 
the comment block. 

25 

DETAILED DESCRIPTION OF THE INVENTION 

The present invention is directed to a method of 
removing personal information from an electronic document 
which has been created by a given application. The present 

30 invention allows a user to install a given application, create a 

document within the application, and then remove any 
personal information associated with the document prior to 
exposure of the document to parties other than the user. 

In many applications used to create an electronic 

35 document, one or more pieces of personal information (i.e., 



information about the author of the document, the user of the 
document, and/or information about the document itself) are 
requested by the application and/or entered by the user into 
one or more data storage files of the application, and used by 
5 the application for various purposes. For example, during 

installation of an application, a user's name or some other 
piece of information may be requested by the application. 
Further, a user may desire to identify a new document by 
entering information about the document, such as the user's 

10 name or the user's manager's name, in a file properties file 

associated with the document. In addition, the application 
may automatically display one or more pieces of personal 
information added by the user when a particular feature of the 
application is used, such as a comments feature. In the 

15 present invention, a single privacy option may be used to 

remove personal information from a document, providing 
privacy to the user even when the document becomes 
accessible to third parties (i.e., parties other than the user) via 
a personal computer, a computer system network, or the 

20 Internet. 

Exemplary Operating Environment 
Exemplary embodiments of the present invention will 
hereinafter be described with reference to the drawings, in 

25 which like numerals represent like elements throughout the 

several figures. FIG. 1 illustrates an exemplary operating 
environment for implementation of the present invention. 
The exemplary operating environment includes a general- 
purpose computing device in the form of a conventional 

30 personal computer 20. Generally, a personal computer 20 

includes a processing unit 21, a system memory 22, and a 
system bus 23 that couples various system components 
including the system memory 22 to processing unit 21. 
System bus 23 may be any of several types of bus structures 

35 including a memory bus or memory controller, a peripheral 
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bus, and a local bus using any of a variety of bus 
architectures. The system memory includes a read only 
memory (ROM) 24 and random access memory (RAM) 25. A 
basic input/output system (BIOS) 26, containing the basic 
5 routines that help to transfer information between elements 

within personal computer 20, such as during start-up, is 
stored in ROM 24. 

Personal computer 20 further includes a hard disk 
drive 27 for reading from and writing to a hard disk, not 

10 shown, a magnetic disk drive 28 for reading from or writing 

to a removable magnetic disk 29, and an optical disk drive 30 
for reading from or writing to a removable optical disk 31 
such as a CD-ROM or other optical media. Hard disk 
drive 27, magnetic disk drive 28, and optical disk drive 30 are 

15 connected to system bus 23 by a hard disk drive interface 32, 

a magnetic disk drive interface 33, and an optical disk drive 
interface 34, respectively. Although the exemplary 
environment described herein employs hard disk 27, 
removable magnetic disk 29, and removable optical disk 31, it 

20 should be appreciated by those skilled in the art that other 

types of computer readable media, which can store data that is 
accessible by a computer, such as magnetic cassettes, flash 
memory cards, digital video disks, Bernoulli cartridges, 
RAMs, ROMs, and the like, may also be used in the 

25 exemplary operating environment. The drives and their 

associated computer readable media provide nonvolatile 
storage of computer-executable instructions, data structures, 
program modules, and other data for personal computer 20. 
For example, one or more data files 60 (not shown) may be 

30 stored in the RAM 25 and/or hard drive 27 of the personal 

computer 20. 

A number of program modules may be stored on hard 
disk 27, magnetic disk 29, optical disk 31, ROM 24, or 
RAM 25, including an operating system 35, an application 
35 program module 36, other program modules 37, and program 



data 38. Program modules include, but are not limited to, 
routines, sub-routines, programs, objects, components, data 
structures, etc., which perform particular tasks or implement 
particular abstract data types. Aspects of the present 
invention may be implemented as an integral part of an 
application program module 36 or as a part of another 
program module 37. 

A user may enter commands and information into 
personal computer 20 through input devices, such as a 
keyboard 40 and a pointing device 42. Other input devices 
(not shown) may include a microphone, joystick, game pad, 
satellite dish, scanner, or the like. These and other input 
devices are often connected to processing unit 22 through a 
serial port interface 46 that is coupled to the system bus 23, 
but may be connected by other interfaces, such as a parallel 
port, game port, a universal serial bus (USB), or the like, A 
monitor 47 or other type of display device may also be 
connected to system bus 23 via an interface, such as a video 
adapter 48. In addition to the monitor, personal computers 
typically include other peripheral output devices (not shown), 
such as speakers and printers. 

Personal computer 20 may operate in a networked 
environment using logical connections to one or more remote 
computers 49. Remote computer 49 may be another personal 
computer, a server, a client, a router, a network PC, a peer 
device, or other common network node. While a remote 
computer 49 typically includes many or all of the elements 
described above relative to personal computer 20, only a 
memory storage device 50 has been illustrated in FIG. 1 . The 
logical connections depicted in FIG. 1 include a local area 
network (LAN) 51 and a wide area network (WAN) 52. Such 
networking environments are commonplace in offices, 
enterprise-wide computer networks, intranets, and the 
Internet. 
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When used in a LAN networking environment, 
personal computer 20 is connected to local area network 51 
through a network interface or adapter 53. When used in a 
WAN networking environment, personal computer 20 
typically includes a modem 54 or other means for establishing 
communications over WAN 52, such as the Internet. 
Modem 54, which may be internal or external, is connected to 
system bus 23 via serial port interface 46. In a networked 
environment, program modules depicted relative to personal 
computer 20, or portions thereof, may be stored in the remote 
memory storage device 50. It will be appreciated that the 
network connections shown are exemplary and other means 
of establishing a communications link between the computers 
may be used. 

Moreover, those skilled in the art will appreciate that 
the present invention may be implemented in other computer 
system configurations, including hand-held devices, 
multiprocessor systems, microprocessor based or 
programmable consumer electronics, network person 
computers, minicomputers, mainframe computers, and the 
like. The present invention may also be practiced in 
distributed computing environments, where tasks are 
performed by remote processing devices that are linked 
through a communications network. In a distributed 
computing environment, program modules may be located in 
both local and remote memory storage devices. 

Implementation of Exemplary Embodiments of the 
Present Invention 

One embodiment of the present invention is directed to 
a method of removing one or more pieces of personal 
information from an electronic document, which is produced 
from a document-generating application. The method 
comprises activating a privacy option for the document. As 
used herein, the term "privacy option" describes an optional 
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command, activatable by a user, which enables the process of 
removing one or more pieces of personal information from a 
document. The privacy option is a feature of a given 
application, which usually remains "off for a given 
document until activated by a user. Once activated or turned 
"on," the privacy option puts into motion the process of 
removing personal information from a document or replacing 
personal information within a document with generic 
information. 

The privacy option is specific to a given electronic 
document created by an application. In other words, 
activation of the privacy option in Document 1 does not effect 
the privacy option of an unrelated, newly created Document 
2, which is subsequently opened after the activation of the 
privacy option in Document 1 . In order to remove personal 
information from newly created Document 2, the privacy 
option for Document 2 must be activated. It should be noted 
that in some applications, if Document 1 is used as a template 
to create a new Document 2 and the privacy option is 
activated in Document 1, the privacy option for Document 2 
may be automatically activated upon creation of Document 2. 

The privacy option feature of a given application may 
be located anywhere within the application as long as the 
privacy option is readily available to a user. In applications 
with a Tools Options dialog, such as Microsoft Corporation's 
WORD application, EXCEL application, POWERPOINT® 
application, and ACCESS application, the privacy option may 
be a feature within the Tools Options dialog. The privacy 
option may be as simple as a checkbox, which is activated 
when checked, and not activated when not checked. In other 
applications, the privacy option may appear as a prompt prior 
to closing a document. In this embodiment, a user has the 
option to activate the privacy option prior to closing the 
document if the privacy option has not been activated. In 
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other applications, the privacy option may be present from a 
separate, user interface (i.e., other than in a dialog). 

Examples of suitable privacy options and their possible 
description and location within a given application are given 
below. Suitable privacy options include, but are not limited 
to, a checkbox entitled "Remove personal information from 
this file on save" for Microsoft Corporation's WORD 
application, EXCEL application, and POWERPOINT® 
application; and a checkbox entitled "Remove personal 
information from this file" for Microsoft Corporation's 
ACCESS application. Suitable locations for the privacy 
options within the above Microsoft Corporation applications 
include, but are not limited to, the "Tools Options Security" 
location in Microsoft Corporation's WORD application, 
EXCEL application, and POWERPOINT® application; and 
the "Tools Options General (database)" location or the 
"Property Browser (datapage)" location in Microsoft 
Corporation's ACCESS application. It should be noted that 
the above privacy option descriptions and locations within the 
given applications are only examples of suitable descriptions 
and locations, and are not meant to limit the privacy option in 
any particular way. 

The privacy option may initiate the removal or 
replacement of one or more pieces of personal information 
from an electronic document by filtering through the 
document, identifying personal information, and removing or 
replacing one or more pieces of personal information from the 
document. One or more events may take place while a 
document is open to trigger the removal of personal 
information from the document. Examples of such events 
include, but are not limited to, (1) activation of the privacy 
option; (2) entry of new personal data into a document after 
activation of the privacy option; and (3) saving the document 
after activation of the privacy option. Desirably, in 
applications that support a save function, personal 



11 



information is removed from the document at the time the 
document is saved, after activation of the privacy option. 
Desirably, in applications that do not support the save 
function, personal information is removed from the document 
5 at the following times: (a) when the privacy option is turned 

on, and (b) when new personal data is entered into the 
document after activation of the privacy option. 

In one embodiment of the present invention, the 
method of removing personal information from an electronic 

10 document comprises activating a privacy option, wherein 

activation of the privacy option results in the removal of one 
or more pieces of personal information from the document or 
the replacement of one or more pieces of personal 
information within the document with generic information. 

15 In this embodiment, as soon as the privacy option is turned 

"on," one or more pieces of personal information are removed 
(or replaced) from the memory representation of the 
document, as well as, the file representation of the document. 
As used herein, the "memory representation" of the document 

20 refers to the document component, which is visible to the user 

when the document is being viewed from the application, and 
is present in the memory of the computing system. As used 
herein, the "file representation" of the document refers to the 
document component, which is saved to the disk of the 

25 computing system. Further changes to the document by a 

user will continue to be subjected to the privacy option until 
the privacy option is deactivated or turned "off." 

In a further embodiment of the present invention, 
personal information may be removed from a document once 

30 the privacy option is turned on, even when a feature, which 

adds additional personal information to the document, is 
subsequently used within the document. For example, in the 
application ACCESS, which does not contain a save function, 
a user can turn on the privacy option for a document, which 

35 removes any personal information from the document at that 
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time. If the user subsequently edits the File Properties of the 
document, such as by adding an author name or a company 
name, these pieces of personal information may be removed 
from the document at either of the following times: (1) as 
soon as the user adds the information to the File Properties of 
the document, or (2) as soon as the user chooses "OK" from 
the File Properties dialog box. Alternatively, activation of the 
privacy option in the application, such as ACCESS, prevents 
the addition of any personal information into a given dialog 
box. 

In yet a further embodiment of the present invention, 
the method of removing personal information from an 
electronic document comprises the steps of activating a 
privacy option, and saving the document. In this 
embodiment, activation of the privacy option enables the 
removal (or replacement) of one or more pieces of personal 
information from the document, while the step of saving the 
document results in the removal (or replacement) of the one 
or more pieces of personal information from the document. 
When the privacy option is turned "on," personal information 
remains in both the memory representation of the document, 
as well as, the file representation of the document. However, 
once the document is saved with the privacy option activated, 
one or more pieces of personal information are removed from 
the memory representation of the document, as well as, the 
file representation of the document. It should be noted that in 
this embodiment, further changes to the document will not be 
affected by the privacy option unless the document is saved 
following changes to the document. 

In the embodiments above, when the privacy option is 
activated or the electronic document is saved, the application 
code scans the document for any feature, which uses personal 
information such as an author's name. The application code 
may remove the personal information completely from a text 
box, leaving a blank in the text box. Alternatively, the 
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application code may replace the personal information with 
generic information. For example, the application code may 
be programmed to replace an author's name, such as Mary 
Smith, with the generic word "Author." Any string of generic 
5 information may be used by the application code. Suitable 

examples of generic strings include, but are not limited to, a 
string of letters, numbers, symbols, spaces, or a combination 
thereof. 

Examples of personal information, which may be 

10 removed using the method of the present invention, include, 

but are not limited to, an author's name, a user's name, a 
company name, a manager's name, the name of the user who 
last saved the electronic document, and an e-mail address. 
The personal information may be removed from any part of 

15 the document, which is accessible to third parties. Suitable 

parts of a document include, but not limited to, the file 
properties of the document, a comment box of a document, 
and an e-mail header. It should be noted that the privacy 
option of the present invention, when activated, does not 

20 remove personal information that is part of the text of a 

document. For example, activation of the privacy option does 
not remove the document author's name, which is typed in the 
document as text. 

Further, it should be noted that the privacy option of 

25 the present invention may be used to selectively remove 

and/or replace one or more pieces of personal information 
from a document. As discussed above, one or more pieces of 
personal information within a document, which is viewable or 
accessible to third parties, may be removed from the 

30 document or replaced with a generic string of information. 

Other pieces of personal information intentionally inputted 
into the document, such as digital signatures, may remain in 
the document even when the privacy option is activated. 

The privacy option of the present invention may be 

35 used on any application that stores, saves, and/or uses one or 
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more pieces of personal information as described above. 
Suitable applications, which may contain the privacy option 
of the present invention, include, but are not limited to, the 
following Microsoft Corporation applications: the OFFICE 
5 application, the WORD application, the EXCEL application, 

the POWERPOINT® application, and the ACCESS 
application. 

An example of possible steps in the method of 
removing personal information from an electronic document 

10 as embodied by the present invention is described in the flow 

charts of FIGS. 2a and 2b. The flow charts of FIGS. 2a and 
2b describe one or more possible steps in the method of 
removing personal information from a document. In a first 
method, the method starts at step 200 and proceeds to step 

15 201. At step 201, the user installs a new application, such as 

application module 36, onto a computing system (not shown), 
similar to the computing system of FIG. 1. The method 
proceeds to step 202, where the application requests one or 
more pieces of personal information from the user. At the 

20 next step 203, the user inputs the requested personal 

information. The application saves the personal information 
received from the user in a registry. As used herein, the term 
"registry 55 refers to a central hierarchial database in an 
application, such as Microsoft Corporation's WINDOWS NT, 

25 which stores information necessary to configure the operating 

system for one or more users, applications, and hardware 
devices. The method then proceeds to step 204. At step 204, 
the user creates a new document using the application. 

The method proceeds to decision block 205. At 

30 decision block 205, the user decides whether or not to turn on 

the privacy option at this time. If the user decides not to turn 
on or activate the privacy option, the method proceeds to step 
215 (described below). If the user decides to turn on or 
activate the privacy option, the method proceeds to step 206. 

35 At step 206, the user activates the privacy option. The 
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method then proceeds to decision block 207. At decision 
block 207, it is determined whether or not the application has 
a save function. If the application does not have a save 
function, the method proceeds to step 210 (described below). 
If the application has a save function, the method proceeds to 
step 208. At step 208, the application enables the removal of 
personal information from the document, but does not 
actually remove personal information from the document 
until the save function is executed. The method then 
proceeds to decision block 209. At decision block 209, the 
user decides whether or not to save the document at this time. 

If, at decision block 209, the save function is initiated, 
the method proceeds to steps 210 to 213, as shown in FIG. 2b. 
If the save function is not initiated, the method proceeds to 
decision block 219 (described below). At step 210, the 
application identifies the location of one or more pieces of 
personal information in the document. At step 211, the 
application removes and/or replaces one or more pieces of 
personal information in the memory representation of the 
document. The method then proceeds to step 212. At step 

212, the application removes and/or replaces one or more 
pieces of personal information in the file representation of the 
document. The method then proceeds to step 213. At step 

213, the application saves the non-personal information in the 
document. The method proceeds to decision block 214. At 
decision block 214, the user decides whether or not to edit the 
document at this time. If no revisions are made, the method 
ends at step 215. 

At decision block 207, if the application does not have 
a save function, the method proceeds directly to step 210 and 
proceeds from step 210 as described above. In this 
embodiment, activation of the privacy option results in the 
immediate removal and/or replacement of personal 
information within the document. In other words, a save 
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function is not necessary to remove and/or replace personal 
information within the document. 

Referring once again to decision block 205, if the user 
does not activate the privacy option, the method of the third 
pathway proceeds to decision block 216. At decision block 
216, the user decides whether or not to edit the document at 
this time. If the user decides to edit the document, the method 
proceeds to step 217. At step 217, the user edits the 
document. In this step, the user may utilize a feature of the 
application, such as a comment feature, which results in the 
utilization and display of one or more pieces of stored 
personal information inputted by the user at step 203. The 
method then returns back to decision block 205. 

Referring again to decision block 216, if the user 
decides not to edit the document at this time, the method 
proceeds to step 218. At step 218, the application does not 
remove any personal information from the document because 
the privacy option has not been activated. The method ends 
at step 215. 

Referring now to decision block 209, if the user 
decides not to save the document at this time, the method then 
proceeds to decision block 219. At decision block 219, if the 
user decides not to edit the document, the method proceeds to 
step 218. At this step, the application does not remove any 
personal information from the document because the save 
function has not been used. The privacy option has been 
turned "on," but the document has not been saved to activate 
the removal process. At decision block 219, if the user 
decides to edit the document, the method proceeds to step 
220. At step 220, the user edits the document. The method 
then returns to decision block 209 and proceeds as described 
above. 

Referring now to decision block 214, if the user 
decides to edit the document at this time, the method then 
proceeds to step 221. At step 221, the user edits the 
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document. The method then returns to decision block 207 
and proceeds as described above. 

FIGS. 2a and 2b also display a method wherein a user 
opens an existing document, and then decides whether or not 
to activate a privacy option for the document. This method 
begins at step 230. The method proceeds to step 231, where 
the user opens an existing document. From step 231, the 
method proceeds to decision block 205 and continues along 
one of the pathways described above. 

In one exemplary embodiment of the present invention, 
a privacy option feature may be added to Microsoft 
Corporation's WORD application to function as shown in 
FIGS. 3-6. A document created by Microsoft Corporation's 
WORD application may have some file properties associated 
with the document, which contains one or more pieces of 
personal information including, but not limited to, the 
document title, the subject matter of the document, the author 
of the document, the author's manager, and a company name. 
One or more pieces of personal information in the File 
Properties may have been (1) requested from the user upon 
installation of Microsoft Corporation's WORD application 
and/or (2) inputted by the user upon opening or creating the 
document. As shown in FIG. 3, the File Properties 300 
contains the word "Report" in title box 301, the author's 
name "Mary Smith" in author box 302, and the company 
name "Smith Inc." in company box 303 prior to activation of 
a privacy option and saving of the document. 

FIG. 4 depicts the File Properties of FIG. 3 following 
removal of personal information from a document via 
activation of a privacy option and saving the document. As 
shown in FIG. 4, activation of the privacy and save options 
results in the following changes to File Properties 400: 
removal of the author's name "Mary Smith" from author box 
402, and removal of company name "Smith Inc." from the 
company box 403. In this example, activation of the privacy 
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option did not effect a change in the title box 401; however, it 
should be noted that activation of a privacy option may be 
programmed through code to effect changes in one or more 
data boxes within the File Properties of a document. 

Activation of the privacy option in a document created 
by Microsoft Corporation's WORD application may also 
produce the following changes as shown in FIGS. 5-6. In 
Microsoft Corporation's WORD application, if a user adds a 
comment to the document, the document user's name is added 
as part of the comment. In a WORD document 500 shown in 
FIG. 5, a user adds a comment relating to the word "dog" in 
line 3 of the document. The WORD application 
automatically adds to comment box 501 the name of the user, 
"Mary Smith," 502 to the comment. 

FIG. 6 depicts the comment box of the document 
following removal of personal information from a document 
via activation of the privacy option in Microsoft 
Corporation's WORD application. As shown in FIG. 6, 
activation of the privacy option results in the following 
changes to comment box 600: removal of the author's name 
"Mary Smith" from comment box 601, and replacement of the 
author's name with a generic string of information, in this 
case, the word "Author" 602. It should be noted that 
activation of the privacy option did not effect the text within 
the comment section (i.e., "This is a comment.") of the 
comment box. 

The present invention is also directed to a computing 
system containing one or more application modules, wherein 
at least one application module contains a document- 
generating application and a privacy option for removing one 
or more pieces of personal information from an electronic 
document created by the document-generating application 
usable on the computing system. 

The present invention is further directed to a computer 
readable medium having stored thereon computer-executable 
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instructions for performing the steps of modifying one or 
more pieces of personal information associated with an 
electronic document via a privacy option. 

While the specification has been described in detail 
5 with respect to specific embodiments thereof, it will be 

appreciated that those skilled in the art, upon attaining an 
understanding of the foregoing, may readily conceive of 
alterations to, variations of, and equivalents to these 
embodiments. Accordingly, the scope of the present 
10 invention should be assessed as that of the appended claims 

and any equivalents thereto. 



